Revisions to Sensitive flagger data is exposed via chat WebSockets (and possibly /events), allowing "private" flags to be publicly visible

replaced http://chat.stackexchange.com with https://chat.stackexchange.com

Source Link

edited Jan 18, 2021 at 11:34

replaced http://meta.stackexchange.com/ with https://meta.stackexchange.com/

Source Link

edited Mar 20, 2017 at 10:30

So, after I figured out that I could see who starred a message I figured out that I could see who starred a message (highly related), I figured I might be able to find out the flagger of a message too. So I tried. Here's some data from my logs:

Notice removed Draw attention by Ry-

occurred May 22, 2014 at 13:57

Bounty Ended with Marc Gravell's answer chosen by Ry-

occurred May 22, 2014 at 13:57

edited tags

Link

edited May 20, 2014 at 11:57

Notice added Draw attention by Ry-

occurred May 18, 2014 at 6:18

Bounty Started worth 250 reputation by Ry-

occurred May 18, 2014 at 6:18

[Edit removed during grace period]

Source Link

edited Apr 25, 2014 at 2:00

Loading

Source Link

asked Apr 25, 2014 at 1:55

Loading

Return to Question